CSR: Small: Collaborative Research: Sensorprint: Hardware-Enforced Information Authentication for Mobile Systems

CSR：小型：协作研究：Sensorprint：移动系统的硬件强制信息认证

• 批准号: 1526102
• 负责人: Radu Sion
• 金额: $ 25万
• 依托单位: SUNY at Stony Brook
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-09-01 至 2019-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1526102&HistoricalAwards=false
• 关键词: CSR; Small; Collaborative; Research; Sensorprint

Today's societies are intricately fused through a vast set of technology-driven networks, mostly mobile-based. Individuals equipped with feature-rich mobile devices are becoming the real-time eyes of world events, providing invaluable insights into remote, hard to access sites and events. However, in critical politically and socially charged settings an acceptable level of trust is difficult, especially since current technologies allow easy forging, manipulation and fabrication of data. The goal of this project is to design and build a mobile data technology with increased authenticity and integrity assurances. Of primary importance is the proof that data have been captured live on the actual mobile device and not fabricated. The new framework will more accurately verify that mobile data and the device sensor streams simultaneously captured are factually related and act as the required witness to the authenticity of reported data - a fundamental role in establishing the credibility of mobile and social media. Applications with important social impact include citizen journalism, smart city management and prototype verification.The project will investigate, develop and evaluate a framework for secure and efficient sensor-based mobile data verification mechanisms. In a first thrust, the team will leverage TrustZone to build a trusted mobile device platform to bootstrap trust into sensor readings captured on the device and provide secure storage and a secure execution environment for sensitive functions. In a second thrust, the team will devise solutions to securely and efficiently capture, authenticate, communicate, archive, search, and access mobile device sensor snapshots ("sensorprints"). Finally, the team will develop mechanisms to verify the consistency between mobile data and simultaneously captured sensor streams. In addition, the developed solutions will be evaluated on newly introduced sensor-centric data plagiarism attacks and mobility based data categories.

今天的社会通过大量技术驱动的网络（主要是基于移动的网络）错综复杂地融合在一起。配备了功能丰富的移动的设备的个人正在成为世界事件的实时眼睛，为远程，难以访问的网站和事件提供宝贵的见解。然而，在关键的政治和社会背景下，很难达到可接受的信任水平，特别是因为目前的技术允许轻松伪造，操纵和捏造数据。这个项目的目标是设计和建立一个移动的数据技术，增加了真实性和完整性的保证。 最重要的是证明数据是在实际移动终端上实时捕获的，而不是伪造的。新框架将更准确地验证同时捕获的移动的数据和设备传感器流是否真实相关，并作为所报告数据真实性的必要见证-这是建立移动的和社交媒体可信度的基础作用。 具有重要社会影响力的应用包括公民新闻、智慧城市管理和原型验证。该项目将调查、开发和评估安全高效的基于传感器的移动的数据验证机制框架。首先，该团队将利用TrustZone构建一个可信的移动终端平台，将信任引导到设备上捕获的传感器读数中，并为敏感功能提供安全存储和安全执行环境。在第二个目标中，该团队将设计解决方案，以安全有效地捕获、认证、通信、存档、搜索和访问移动终端传感器快照（“传感器指纹”）。最后，该团队将开发机制来验证移动的数据和同时捕获的传感器流之间的一致性。此外，开发的解决方案将在新引入的以传感器为中心的数据剽窃攻击和基于移动性的数据类别上进行评估。